Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33392e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33392e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          8GRPHXww34dptvUZvoHO3UDJKvqF3HgYiF/yPhPH7E4=
Subject key identifier:   58:4B:70:BB:F0:47:F9:90:4A:4B:26:23:B4:DE:7C:9D:E4:A7:17:17
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       1A74A68052CC8F3A7EFC2B20EE860DE08970DD5A
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33392e302f32342d3234203d3e20323632353738.roa
Signing time:             Sat 02 Sep 2023 13:29:53 +0000
ROA not before:           Sat 02 Sep 2023 13:24:53 +0000
ROA not after:            Sat 31 Aug 2024 13:29:53 +0000
asID:                     262578
IP address blocks:        177.84.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:74:a6:80:52:cc:8f:3a:7e:fc:2b:20:ee:86:0d:e0:89:70:dd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Sep  2 13:24:53 2023 GMT
            Not After : Aug 31 13:29:53 2024 GMT
        Subject: CN=584B70BBF047F9904A4B2623B4DE7C9DE4A71717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:5c:13:7b:11:91:2f:bb:8f:b0:a2:bc:b6:
                    0d:d2:f9:a3:fa:70:29:c5:7b:e6:f5:00:e5:ae:2b:
                    e9:31:07:6a:ff:83:d9:4d:d8:b7:fb:51:d7:cc:64:
                    27:60:69:f1:d6:a3:66:d2:be:61:16:62:63:be:14:
                    ee:aa:9f:dc:6d:76:45:45:62:95:dc:ea:33:11:ae:
                    88:63:ce:2f:33:87:5d:c4:e6:5f:e3:73:c2:4d:dc:
                    05:c4:80:4f:14:ed:e6:7a:69:4a:75:13:12:25:47:
                    d1:11:10:48:4e:64:b9:18:17:1a:e6:3b:b5:93:dc:
                    6a:25:37:ac:2f:e6:f5:7f:c0:c9:23:5d:a1:7f:63:
                    28:b0:4b:13:11:7d:2d:0c:3a:54:72:d3:ee:ce:f5:
                    1c:55:6e:a9:11:e7:35:66:ea:f0:48:3c:90:be:8c:
                    ff:c0:bd:ec:d0:66:23:40:5c:e5:f7:78:2e:04:2f:
                    e6:48:ce:2c:9c:73:7b:25:29:b5:99:15:3f:0c:28:
                    03:ea:c4:66:c6:e5:3e:61:2e:3d:27:7b:be:db:1c:
                    8b:b6:5d:b5:b4:be:6a:dc:b6:b4:71:a2:60:38:a5:
                    3b:4b:93:76:df:e4:80:c8:6f:9d:6b:1f:c8:74:ec:
                    61:15:3e:c8:c2:cb:98:96:d7:ed:45:56:ae:af:c1:
                    d2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4B:70:BB:F0:47:F9:90:4A:4B:26:23:B4:DE:7C:9D:E4:A7:17:17
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33392e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:d9:a2:78:f7:1d:93:b8:fb:c7:a6:b9:8f:93:cb:27:19:b2:
         2c:d9:00:64:ab:8b:25:7d:ec:3c:1b:29:8e:20:39:a6:5c:a4:
         46:21:8b:b2:9e:b0:58:c9:2c:06:66:66:71:14:28:d2:b6:43:
         1a:58:fb:25:75:57:fc:41:b6:bb:57:71:e2:30:ca:db:45:62:
         50:fc:1a:75:c3:37:4e:6d:3e:5e:46:1c:21:b2:24:7a:76:3b:
         be:08:7e:f6:1a:a9:6e:60:6b:7e:4e:f3:03:a2:6d:f3:dc:2f:
         b0:7d:2e:cf:11:0e:c0:d8:78:1e:a9:7e:8b:56:03:bf:7b:54:
         73:93:77:c7:16:fa:23:1f:a3:c1:a5:fa:08:2c:6a:60:4e:9d:
         51:a5:fa:23:bd:7c:39:f4:d5:54:54:7b:d9:05:48:7b:12:43:
         b7:16:0f:20:31:b3:dd:0d:f8:e1:2b:b1:d1:17:8f:b8:a3:fa:
         2b:80:55:6f:ea:59:05:ee:d9:53:9b:42:a4:db:55:40:94:e6:
         7f:86:be:3a:56:b2:aa:06:43:22:33:8a:c1:ca:b0:76:20:79:
         c4:fa:f7:a2:9d:5c:42:0b:8d:28:a6:a0:b9:d6:29:7b:ec:11:
         52:59:6c:87:ab:3e:19:67:c4:49:a0:d7:90:73:f1:12:37:fb:
         40:6e:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org